Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: hl0uzhUWTv+IbOsWd44k0jUpjqAVWpfnVyzXZQ68O/U=
Subject key identifier: EF:03:9D:DF:1B:8F:7F:61:ED:2B:FA:75:57:E6:C4:C0:08:72:69:1A
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 0199FB45FC16058E119C5A2B8DA741ED3B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0BE6
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: iIsCISE4nvwitHOI3l7zdfmhevwNp08MnbO1TxDQS5g=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fc:16:05:8e:11:9c:5a:2b:8d:a7:41:ed:3b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=ef039ddf1b8f7f61ed2bfa7557e6c4c00872691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:bf:83:7d:bb:35:ca:41:0e:b0:76:2a:af:
57:4b:b3:f8:16:b6:14:94:b8:21:27:9b:62:5c:44:
cf:0c:4b:72:60:72:4f:7e:8b:cd:7b:c0:77:fa:af:
22:66:96:39:6e:6f:8d:a2:8b:01:67:a1:02:87:98:
82:ef:b6:a5:04:d4:af:97:a1:f0:a3:70:a3:c3:31:
e0:bf:e8:e5:c9:b5:85:b1:9a:42:2a:09:d1:1d:e3:
8e:b9:71:da:40:6b:14:ac:25:dd:aa:43:9d:39:d8:
0e:21:5a:fb:3c:4c:b6:97:36:d0:25:ad:f3:9b:0f:
4f:46:93:19:69:c2:d1:36:ae:cf:f2:ce:af:a3:84:
98:a7:a8:3c:17:25:b6:b4:9b:c3:4f:0a:20:65:06:
1d:41:19:1d:ff:fe:16:8b:ae:40:56:ea:90:6d:b3:
25:be:72:84:bb:f6:42:91:fd:04:ca:ab:e2:f0:f2:
0a:3d:97:59:e1:27:de:9a:85:28:a3:31:56:4a:d4:
49:58:6e:60:fe:0d:fc:46:f4:79:05:d0:30:32:97:
52:bb:67:40:8f:f5:1d:bb:86:d6:b7:ec:29:97:32:
9c:ae:da:5d:91:62:d4:c6:5c:d8:01:2f:1c:42:b7:
2f:28:95:76:e7:3f:0f:ab:f3:de:6f:5f:49:e7:fb:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:9D:DF:1B:8F:7F:61:ED:2B:FA:75:57:E6:C4:C0:08:72:69:1A
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8c:2a:8f:47:ca:72:ad:c3:3f:cb:f3:14:3e:a0:95:8e:45:
3c:a0:84:c1:e8:70:a0:2e:0a:d4:c8:e8:37:49:15:51:e1:52:
27:33:ec:1a:91:9b:05:9b:c4:6d:3f:63:6f:24:b6:17:d9:6e:
0b:88:fa:f4:26:62:77:b2:a6:fd:04:aa:b4:38:6a:49:20:de:
7b:31:cf:17:47:33:cb:e9:ca:1e:84:11:64:f9:82:9c:f1:07:
e9:50:75:55:b2:21:da:e2:09:52:c0:71:1b:be:4b:b8:88:2a:
69:b2:b2:24:2a:e3:19:06:30:68:0f:90:ae:29:b6:2e:cc:fe:
22:c3:38:38:5c:36:82:01:de:1a:f4:30:7a:ee:38:1c:78:1f:
bd:5d:c1:54:4f:81:c6:38:41:26:70:65:dd:1d:08:da:0b:33:
48:6d:96:cd:6d:37:e4:c6:89:b3:08:a0:a0:52:4f:ed:4e:3a:
c0:27:38:32:2c:46:40:b6:c4:96:73:4e:49:c3:5b:7b:5a:2b:
f7:bd:cd:0e:f5:53:7f:70:da:64:33:3a:0a:fe:26:19:e3:66:
9d:91:a8:b7:25:49:47:c2:df:af:aa:34:bf:07:a2:ae:26:42:
e0:29:ba:1f:39:7d:9f:99:2e:45:8a:34:04:90:c0:8b:9b:45:
2f:4a:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:08 2025 by rpki-client